$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft File: 42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json) Hash identifier: 4EaY09yOsThRCILAFdjitOuucW4YQ5Oy4cRei+CM4Ag= Subject key identifier: 59:8B:3C:B7:3D:3F:2F:EB:AC:60:79:27:EE:0F:B0:D2:06:E9:96:48 Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 42FA87F37E2839BAC45D2ED8F426CE375B22AF60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft Manifest number: 0321 Signing time: Thu 21 Aug 2025 20:40:46 +0000 Manifest this update: Thu 21 Aug 2025 20:35:46 +0000 Manifest next update: Mon 25 Aug 2025 03:46:46 +0000 Files and hashes: 1: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=) 2: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=) 3: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=) 4: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=) 5: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=) 6: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=) 7: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=) 8: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=) 9: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=) 10: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=) 11: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=) 12: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=) 13: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: S7YmdzcXiYsBsk5+LTQHIg1WZYBtVJccpTw1e3gwvxU=) 14: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=) 15: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=) 16: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=) 17: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=) 18: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fa:87:f3:7e:28:39:ba:c4:5d:2e:d8:f4:26:ce:37:5b:22:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Aug 21 20:35:46 2025 GMT Not After : Aug 25 03:46:46 2025 GMT Subject: CN=598B3CB73D3F2FEBAC607927EE0FB0D206E99648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:be:d0:85:9b:82:1f:a8:9e:a3:62:cd:03: e8:36:70:6c:ef:56:ac:aa:3a:a1:48:eb:82:fb:e4: b1:4a:ea:96:d5:95:8d:6d:0e:8a:b1:38:e6:ec:4f: b2:e3:87:87:6f:08:f7:86:8f:5e:29:f4:91:6e:bc: 0e:c5:51:80:50:6d:6f:db:ed:5d:d9:98:b8:68:f7: b1:a3:c6:0d:2e:b8:b5:d6:cf:eb:7d:10:68:b1:4b: 7b:31:45:fc:07:1f:da:7c:ce:55:a5:30:73:05:eb: fa:be:cb:dd:2a:f7:7b:87:be:68:bd:fb:f7:25:ed: 8b:d3:e7:a7:10:77:b8:4a:0f:ec:b7:4d:df:66:79: 6b:b2:dc:cd:af:bd:c0:d5:f0:c5:e8:c3:c9:4a:49: 63:c4:f1:d6:ee:d6:8c:aa:98:1b:98:f7:f9:c3:e1: 0f:02:a6:ee:7a:8d:ed:64:bd:f0:05:19:30:1d:fb: f9:87:b9:14:b9:6b:74:2a:d8:cc:cd:23:d9:ca:55: 94:ec:c7:f7:ad:db:ba:34:0e:af:4e:81:81:51:76: f7:9f:65:61:00:bc:e9:a1:ee:36:d7:c8:49:89:54: e6:9c:64:3a:86:66:1b:16:ee:be:54:76:95:11:99: 4d:5f:9f:05:c6:e9:5b:a7:a8:3f:82:aa:83:e1:b6: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8B:3C:B7:3D:3F:2F:EB:AC:60:79:27:EE:0F:B0:D2:06:E9:96:48 X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:81:15:95:aa:11:24:15:d0:c9:56:4c:14:6f:fc:fe:db:d3: 3d:7e:90:47:f0:2b:6c:16:44:b4:f2:d1:29:b2:33:bb:fb:ab: 54:da:4a:64:a4:e4:47:82:94:36:19:83:f2:8b:2a:4a:cc:c5: 4d:8a:94:9c:0e:c8:73:30:00:5e:2e:4e:7c:d2:3e:75:22:a6: bc:27:23:db:25:0e:f8:72:59:9b:ac:31:e4:9d:c9:03:03:7c: 0a:50:b5:ce:96:31:19:fe:03:3d:ae:c1:e8:04:1c:01:89:b2: b1:75:d8:48:6d:77:4c:9a:1d:85:7c:54:de:a4:1d:ce:b4:f7: 85:fd:d3:6c:eb:c1:0f:00:b9:5e:45:6e:ef:50:b7:55:37:9d: 45:74:62:b8:a3:62:50:56:a9:d2:9f:91:6c:e2:68:cb:7f:55: c9:97:d7:42:d7:33:23:3a:9f:1f:26:b9:d3:7f:7f:4a:5a:15: d6:7e:41:89:d8:8d:3b:01:94:76:d6:bf:84:8b:e2:f2:a3:65: 2b:14:b5:be:aa:b4:59:f9:30:a5:6a:a6:3f:4d:04:91:fd:98: 70:ae:67:e6:60:0c:50:bc:61:a3:54:ce:2e:e3:26:34:6c:c9: 2a:41:d6:b7:9e:02:83:1e:61:f6:5e:e5:26:ba:34:2d:54:25: 3a:7c:bc:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvqH834oObrEXS7Y9CbON1sir2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNTA4MjEyMDM1NDZaFw0yNTA4MjUwMzQ2NDZaMDMxMTAvBgNV BAMTKDU5OEIzQ0I3M0QzRjJGRUJBQzYwNzkyN0VFMEZCMEQyMDZFOTk2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQ77QhZuCH6ieo2LNA+g2cGzv VqyqOqFI64L75LFK6pbVlY1tDoqxOObsT7Ljh4dvCPeGj14p9JFuvA7FUYBQbW/b 7V3ZmLho97Gjxg0uuLXWz+t9EGixS3sxRfwHH9p8zlWlMHMF6/q+y90q93uHvmi9 +/cl7YvT56cQd7hKD+y3Td9meWuy3M2vvcDV8MXow8lKSWPE8dbu1oyqmBuY9/nD 4Q8Cpu56je1kvfAFGTAd+/mHuRS5a3Qq2MzNI9nKVZTsx/et27o0Dq9OgYFRdvef ZWEAvOmh7jbXyEmJVOacZDqGZhsW7r5UdpURmU1fnwXG6VunqD+CqoPhtgTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWYs8tz0/L+usYHkn7g+w0gbplkgwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyZjIyOGMtZGYyMC00NzI4LTlm OTYtOGZhYTEzNDAwMTdhLzAvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0RE ODFFQzdDQTMwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqBFZWqESQV0MlWTBRv/P7b0z1+kEfwK2wW RLTy0SmyM7v7q1TaSmSk5EeClDYZg/KLKkrMxU2KlJwOyHMwAF4uTnzSPnUiprwn I9slDvhyWZusMeSdyQMDfApQtc6WMRn+Az2uwegEHAGJsrF12Ehtd0yaHYV8VN6k Hc6094X902zrwQ8AuV5Fbu9Qt1U3nUV0YrijYlBWqdKfkWziaMt/VcmX10LXMyM6 nx8mudN/f0paFdZ+QYnYjTsBlHbWv4SL4vKjZSsUtb6qtFn5MKVqpj9NBJH9mHCu Z+ZgDFC8YaNUzi7jJjRsySpB1reeAoMeYfZe5Sa6NC1UJTp8vBI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:40 2025 by rpki-client